r/techsupport • u/fullraph • 11h ago
Open | Windows Someone remote connected to my computer and immediately went to microsoft Azure, what were they after?
As the title says, my computer got hacked. As soon as I found out, the computer has been isolated and wiped, that part has been taken care of already.
Last friday, someone from russia (got this from the firewall log) was able to connect to my computer despite having region blocking enabled. For some obscure reason, my computer had not automatically logged me out that day like it usually does after 5 mins of inactivity. Now, I happen to have a camera on the ceiling behind my desk which has full view of my monitors.
At 2AM sharp, I can see my cursor start to move and chrome open. They opened gmail (was already logged in) and scrolled thru my emails. I exclusively use my gmail for garbage and subscriptions, they found nothing but ads and newsletters. They then opened a second tab and opened the Microsoft Azure login page. They then tried to log in using my gmail address, unsuccessfully, as there is no Azure account tied to it. And that was it, they left my computer alone. This took place over the course of about 2 minutes. I don't even use Azure...
I had saved credit cards and a bunch of business files on this computer which they had seemingly no interest into... So now I am wondering what were they after? Azure is a cloud computing plateforme, as far as I am aware? What were they hoping to find? Thanks!